PT-2025-17848 · Vestel · Vestel Ac Charger

Cumhur Kizilari · Published 2025-04-24 · Updated 2025-04-25 · CVE-2025-3606

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Vestel AC Charger version 3.75.0

Description The issue allows an attacker to access files containing sensitive information, such as credentials, which could be used to further compromise the device. This vulnerability could enable remote access to sensitive files. The vulnerability was reported by Cumhur Kizilari to CISA.

Recommendations For Vestel AC Charger version 3.75.0, consider restricting access to sensitive files until a patch is available. As a temporary workaround, avoid using the charger until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-3606

Affected Products

Vestel Ac Charger

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-3606 · Security Note
• https://twitter.com/cybercronai/status/1915742704866111725 · Twitter Post
• https://twitter.com/transilienceai/status/1915617438617526291 · Twitter Post
• https://twitter.com/syedaquib77/status/1915488784055230791 · Twitter Post
• https://firebasestorage.googleapis.com/v0/b/vestel-shield.firebasestorage.app/o/PRODUCTION%2F1%2FVSA-1_R2.pdf?alt=media&token=8201f299-5014-4720-9200-f1b335736ac1 · Note
• https://twitter.com/windowsforum/status/1915458860518683131 · Twitter Post
• https://t.me/cvenotify/119753 · Telegram Post
• https://twitter.com/CVEnew/status/1915551608139665830 · Twitter Post
• https://t.me/cvedetector/23712 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-114-03 · Note
• https://twitter.com/CveFindCom/status/1915550148387541269 · Twitter Post
• https://twitter.com/transilienceai/status/1915617420712050925 · Twitter Post
• https://t.me/cvetracker/22335 · Telegram Post